SSLProtocol: Illegal protocol 'TLSv1.2'

Rtoogee · 03-14-2016, 10:25 PM

Hi,
I use
- Red Hat Enterprise Linux Server release 6.4 (Santiago)
- Apache/2.4.17 (Unix)
- OpenSSL 1.0.0-fips 29 Mar 2010

I want to enable TLSv1.2, so i did upgrade OpenSLL into OpenSSL 1.0.1e-fips 11 Feb 2013

And then change /usr/local/apache2/conf/extra/httpd-ssl.conf with this command:
#SSLProtocol all -SSLv3
#SSLProxyProtocol all -SSLv3
SSLProtocol -all +TLSv1.2
SSLProxyProtocol -all +TLSv1.2

But when i did restart httpd there is error:
restart httpd : AH00526: Syntax error on line 83 of /usr/local/apache2/conf/extra/httpd-ssl.conf:
SSLProtocol: Illegal protocol 'TLSv1.2'

Please help me how to solve this issue.
IMO, Apache/2.4.17 (Unix) and penSSL 1.0.1e-fips 11 Feb 2013
already support TLSv1.2

Thank You

bathory · 03-16-2016, 02:01 AM

Hi,

You don't give more details, but I guess you've compiled apache from sources (because it's installed in /usr/local/apache2) and you did the same for openssl- 1.0.1e
If that's the case, then apache used the header/library files from the default openSSL 1.0.0 when compiling, that's why it doesn't support TLSv1.2
You should recompile apache using:

Code:

make distclean
export CPPFLAGS=-I/path/to/openSSL-1.0.1e/include
export LDFLAGS=-L/path/to/openSSL-1.0.1e/lib
./configure ...

Regards